{"id":2118191,"url":"https://alion.io/job/janus-henderson-identity-security-engineer","title":"Identity Security Engineer","company":{"id":704052,"name":"Janus Henderson","domain":"janushenderson.com","url":"https://alion.io/company/janus-henderson","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":100000,"currency":"USD","period":"year","gross":null,"usd_annual":100000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"ServiceNow","optional":false},{"name":"Model Context Protocol","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-15T00:00:00Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-16T06:40:11Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"Why work for us?\nA career at Janus Henderson is more than a job, it’s about investingin a brighter future together.\nOur Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.\nOur Values are key to driving our success, and are at the heart of everything we do:\nClients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust\nIf our mission, values, and purpose align with your own, we would love to hear from you!\nYour opportunity\nThe Identity Security Engineer is a hands-on security engineering role focused on securing privileged access and identities across JHI. The role is primarily responsible for designing, implementing, and operating Privileged Access Management (PAM) controls, ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle. In addition, the engineer will support identity threat detection and response capabilities, investigate identity-related security events, maintain data access governance tooling, and develop security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk.\nWhat to expect when you join our firm\nHybrid working and reasonable accommodations\nGenerous Holiday policies\nExcellent Health and Wellbeing benefits including corporate membership to Wellhub\nPaid volunteer time to step away from your desk and into the community\nSupport to grow through professional development courses, tuition/qualification reimbursement and more\nMaternal/paternal leave benefits and family services\nUnique employee events and programs including a 14er challenge\nComplimentary beverages, snacks and all employee Happy Hours\nMust have skills\nStrong understanding of Privileged Access Management (PAM) principles, including least privilege, just-in-time access, ephemeral access, privileged session management, secrets management, and credential vaulting.\nAbility to investigate, triage, and resolve PAM and identity-related incidents, requests, and operational issues while driving root-cause remediation.\nExperience administering and engineering enterprise PAM platforms such as Britive, CyberArk, Delinea, or equivalent.\nExperience designing, implementing, and operating privileged access controls across on-premise and cloud environments.\nExperience onboarding and governing privileged users, service accounts, machine identities, APIs, workload identities, and other non-human identities throughout their lifecycle.\nExperience securing and managing privileged access for automation platforms, cloud workloads, DevOps tooling, and emerging AI/agentic systems.\nExperience configuring and maintaining identity security and data access governance platforms, including Active Directory/Entra ID auditing, permissions analysis, access monitoring, and security reporting.\nStrong understanding of Identity Access Governance (IAG) concepts and integrations between PAM, IAG, and ITSM platforms, such as SailPoint Identity Security Cloud (ISC) and ServiceNow, with experience supporting identity lifecycle management, provisioning workflows, and troubleshooting workflow issues.\nExperience working with Active Directory, Entra ID, federation, authentication, access control, and modern identity security architectures.\nExperience developing security metrics, KPIs, dashboards, and reporting that measure control effectiveness, operational performance, adoption, and risk reduction in an automated manner.\nNice to have skills\nExperience with Identity Threat Detection & Response (ITDR) and identity-centric threat monitoring.\nExperience with User and Entity Behaviour Analytics (UEBA) platforms.\nExperience creating, tuning, or maintaining identity-focused detections, analytics, and use cases within a SIEM platform.\nUnderstanding of identity-focused attack techniques including account compromise, privilege escalation, credential theft, lateral movement, and insider threats.\nPowerShell and/or Python scripting experience for automation and operational efficiency.\nExperience integrating identity platforms with SIEM, SOAR, and security operations tooling.\nExperience monitoring and securing non-human identities, machine identities, and AI agents.\nKnowledge of AI agent security, non-human identity governance, MCP security, delegated permissions, workload identities, and AI-related identity threats.\nSupervisory responsibilities\nNo\nPotential for growth\nMentoring\nLeadership development programs\nRegular training\nCareer development services\nContinuing education courses\nCompensation information\nThe base salary range for this position is $90,000 to $100,000. This range is estimated for this role. Actual pay may be different. This position will be open through October 2026.\nColorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed.\nAt Janus Henderson Investors we’re committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don’t worry if you don’t think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can’t accommodate every flexible working request, we’re happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at \nAnnual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance.\nBenefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here.\nJanus Henderson Investors is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks.\nJanus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licenses where not supported by an employee’s job functions (as determined by Janus Henderson at its sole discretion).\nYou should be willing to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants’ past political contributions or activity may impact applicants’ eligibility for this position.\nYou will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.","description_format":"text","description_chars":7458,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Adventure Tourism","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-10-08T23:41:37Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.555,"p_room":0.55,"age_days":31,"expected_fill_days":26,"reasons":["conf:4","velocity","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":100000,"is_top_pay":false},"html_url":"https://alion.io/job/janus-henderson-identity-security-engineer","json_url":"https://alion.io/job/janus-henderson-identity-security-engineer.json","meta":{"generated_at":"2026-10-17T04:47:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6316,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":704052},"rest":"https://alion.io/mcp/rest/get_company?id=704052"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjanus-henderson-identity-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjanus-henderson-identity-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjanus-henderson-identity-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/janus-henderson-identity-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjanus-henderson-identity-security-engineer"}]}